Full Job Description
The Compliance Analyst ensures that Harvard Business Publishing operations and procedures meet government and industry compliance standards. The successful hire will research regulations and policies, communicate requirements, and work on Compliance & Security related tasks. This role is a member of the Information Security team within the Information Technology department.
Job Duties:
- Assist in regular privacy and security compliance assessments to better understand potential operational gaps within the organization that result in creation of remediation and corrective action plans
- Generate executive reports of audit findings and recommendations
- Work with HBP customers to address their privacy and security concerns
- Support different business units to understand and address compliance needs
- Collaboration with legal on compliance needs that involve legal reviews and recommendations
- Assist and support the Vendor Management Program (VMP) by performing risk assessments of new HBP vendors
- Research industry standard regulations by reviewing bulletins and other sources of information
- Keep departments abreast of requirements by researching regulatory information, writing and assisting in communicating guidelines
- Prepare reports by collecting, analyzing, and summarizing information
- Contributes to team effort by accomplishing related tasks as needed
- Must be very accurate in the written word and conversation, many of the outcomes of this role have legal consequence
Qualifications
- 2-3 years of experience in a privacy and security compliance role
- Understanding of the GDRP and PCI DSS as they apply to businesses
- Understanding of CCPA and other privacy laws across the US
- Knowledge of the ISO 27001 standards framework
- Strong verbal and written communication skills
- Ability to work both independently and as part of a team
- Accountability, responsibility and ownership for assigned projects
